Troubleshooting Tip: The website is blocked by SSL & SSH Inspection Security Profiles

[raureada]

Description	This article describes how to fix an issue where Application Name SSL blocks a website.
Scope	FortiGate.
Solution	The forward logs will show that the site is blocked by UTM: specifically, the Application Name SSL. In this example, an examination of Log & Report -> Security Events -> SSL revealed that the site is being blocked because of a certificate-probe-fail. As a workaround, configure the following settings on the FortiGate: config firewall ssl-ssh-profile edit "name" config ssl set cert-probe-failure allow end The settings for the certificate probe may have to be changed. If using SD-WAN for example, this should be specified in the probe configuration. Follow this article for more info on how to troubleshoot the 'cert-probe-failure'.